Connecting GitHub Enterprise Server to Drata allows for automated tests and evidence collection to prove to auditors that your company follows its software development lifecycle procedures.

Prerequisites

If your GitHub instance is not publicly available, please configure your network device with the following information.

Configure your network device to add the following IP address to port 443. The configuration is based on your internal network layout. Contact your IT team to configure and add the following IP addresses based on your region.

North America

54.190.125.76
35.83.232.49
35.164.233.77
44.230.111.50
3.132.55.182
3.16.197.217
3.18.141.25

Europe

18.196.253.2
3.73.237.1
3.64.113.104
46.51.157.29
52.50.71.20
52.211.226.244

To learn more, go to the following external resources:

Enable GitHub Enterprise Server

Select Connections on the side navigation menu.
Select the Available connections tab, search for GitHub Enterprise Server, and select Connect.
Follow the instructions on the connection drawer. The following sections go in depth about the instructions on the drawer.

Enter your hostname

After configuring your network device, enter the publicly accessible DNS hostname or IP address for your on-premise GitHub. Ensure that the proper protocol is assigned to your hostname or IP.

Select Create GitHub Application button

After entering your hostname, select Create GitHub Application button to create a GitHub application. Ensure that the application name is Drata. Once the connection is established, you can change the application name.

This application will be used to configure access to your on-premises users, projects, and repositories for Drata to automatically validate evidence. Once the application has been created, you will be redirected back to Drata.

If an error occurs after the application has been created, it is perfectly safe to delete the application and recreate it.

Organizational Rulesets

If you are using Organizational Rulesets, after installing the Drata app and connecting to your Drata account, you will need to manually update your permissions. To learn more, refer to GitHub Organizational Rulesets

Select Install GitHub Application

Select Install GitHub Application button to install the Drata application within your on-premises Organization. You will be redirected to the GitHub organizational installation form. Verify that the GitHub application Drata is installed on the desired Organization and enable All repositories.

Verify successful connection

To verify a successful connection, go to the Connections page and search for GitHub Enterprise Server. If connected, an Active status will be displayed on the GitHub Enterprise Server card.